Remove the tls { dns cloudflare ... } directive and fall back to
Caddy's default automatic HTTPS (HTTP-01 / TLS-ALPN). The
Cloudflare DNS plugin was causing issues during cert provisioning;
standard ACME works fine as long as port 80/443 reach the server.
Also drop the now-unused cloudflare_token variable from group_vars.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
9 lines
232 B
Django/Jinja
9 lines
232 B
Django/Jinja
# Managed by Ansible - ecosplay-auth
|
|
# Reverse proxy for {{ auth_domain }} -> local Keycloak container on :{{ keycloak_local_port }}
|
|
|
|
{{ auth_domain }} {
|
|
encode gzip zstd
|
|
|
|
reverse_proxy 127.0.0.1:{{ keycloak_local_port }}
|
|
}
|